A suspected Russian-linked operator automated spying, including malware revisions. Stolen material included drone technology and government records.
Source: AnthropicAn investigator with an assistant can sort leads and prepare more work. In an espionage campaign, that added capacity serves an unauthorized purpose.
Source: AnthropicA suspected Russian-linked operator automated spying, including malware revisions. Stolen material included drone technology and government records.
Source: AnthropicEspionage is the covert collection of information. Automating supporting work can change what a small team is able to attempt.
Source: AnthropicAn investigator with an assistant can sort leads and prepare more work. In an espionage campaign, that added capacity serves an unauthorized purpose.
An analogy for the mechanism; not an additional claim about the incident.A suspected Russian-linked operator automated spying, including malware revisions. Stolen material included drone technology and government records. Anthropic
A targeted organization is not necessarily a breached organization.
Targets are not confirmed victims. The number does not establish how many systems were compromised.
The report covers December 2025–August 2026 overall. That window is not the start and end date of this individual case.
Espionage is the covert collection of information. Automating supporting work can change what a small team is able to attempt.
Anthropic reports disrupting abusive accounts. An account ban does not establish that the broader operation has ended. Anthropic
The reported espionage campaign includes a linked operation that lured travelers through fake update or sign-in prompts.
Managed software installation, trusted update channels, and phishing-resistant sign-in can help protect staff when a convincing prompt asks them to install something or sign in.
The traveler example comes from a linked subcampaign. It is not an established entry route for every reported target.
Security teams can connect suspicious device activity with account use and access to sensitive records, then contain the affected device or account.
AI-assisted analysis still needs reliable records and validation; it cannot reveal activity on systems the team cannot observe.
Editorial connections to relevant controls, not evidence that a particular technology would have prevented this case. Each guide links to the security guidance behind its recommendations.
Explore the full AI security frameworkCorroborating reporting on the CaptiveCrunch subcampaign that Anthropic links within GTG-20006.
Microsoft observed AI-supported operations by Storm-2945 since February 2026, and manipulation of hospitality guest-network traffic since early May. Microsoft Threat Intelligence
Travelers were redirected to fake update or sign-in prompts. The delivered software could steal information or provide remote access. Microsoft Threat Intelligence
Microsoft associated Storm-2945 with Midnight Blizzard, while saying the initial entry into guest-network systems remained under investigation. Microsoft Threat Intelligence
A traveler joins guest Wi-Fi. A convincing prompt appears to fix the connection. Following it can hand information or access to an attacker.
This is a simplified composite of the reported technique, not a reconstruction of a named victim.February describes the actor activity Microsoft observed; early May describes CaptiveCrunch. Neither dates every intrusion grouped under GTG-20006.
Explore more original accounts in the source report library ↗.
These are source-reported findings. An independent assessment, when available, is labeled explicitly.
01Reviewed Sep 10, 2026 · Editorial methodology · Structured data